Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/WSQgHBVEHqWqyhrZbszAUFm9bj4.roa
File: WSQgHBVEHqWqyhrZbszAUFm9bj4.roa (raw, json)
Hash identifier: itWLc+iPhn8Pq/WoWrGG8wHHlWX8EcKjzI+r+zKKvu8=
Subject key identifier: 59:24:20:1C:15:44:1E:A5:AA:CA:1A:D9:6E:CC:C0:50:59:BD:6E:3E
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 01936EF01D8109D1DEAFDA8EF0CBD3183D5D
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/WSQgHBVEHqWqyhrZbszAUFm9bj4.roa
Signing time: Wed 27 Nov 2024 18:44:09 +0000
ROA not before: Wed 27 Nov 2024 18:44:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213945
IP address blocks: 217.18.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6e:f0:1d:81:09:d1:de:af:da:8e:f0:cb:d3:18:3d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Nov 27 18:44:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5924201c15441ea5aaca1ad96eccc05059bd6e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ca:82:34:63:db:a3:4c:06:fb:b6:b3:0b:f8:
e3:e9:a5:4c:30:ea:52:43:c9:93:c3:a2:73:f0:c2:
cc:3c:21:a7:ef:18:e0:29:97:97:0f:8f:ae:d4:dd:
92:24:58:56:7e:57:6b:15:4c:5e:12:60:8f:79:73:
9e:0e:a9:1d:72:df:79:e7:c1:cd:5f:76:a3:88:be:
6d:b1:cc:31:43:2a:6c:06:57:9d:93:85:4b:d4:9c:
1c:cb:8e:55:12:ac:99:2b:9b:a0:f7:29:ae:6b:20:
fc:0b:31:8c:52:6e:e7:38:b1:51:ad:0e:0e:c3:3d:
fd:6b:0f:79:e0:53:7b:79:6b:e1:d3:94:a9:f4:19:
4b:79:4f:de:2a:0c:32:6b:91:19:36:d1:70:65:9f:
2d:f4:95:56:3b:11:ce:ed:c5:b4:c8:7b:75:5d:5f:
af:1e:05:27:11:fb:52:e5:6f:25:27:ff:5f:0d:5d:
19:5b:5b:3f:e8:02:1f:55:60:26:c1:d4:ec:ba:90:
35:d7:2f:64:ea:03:3a:59:ba:e5:28:f3:8d:8f:d4:
b8:dd:ba:62:69:f2:60:6a:2e:f8:88:b7:0d:ab:25:
11:ae:3e:91:1c:22:3a:f1:7c:cb:89:21:5e:39:a2:
47:c0:8c:25:c7:8f:75:bd:38:d3:5d:56:90:cc:f0:
2f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:24:20:1C:15:44:1E:A5:AA:CA:1A:D9:6E:CC:C0:50:59:BD:6E:3E
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/WSQgHBVEHqWqyhrZbszAUFm9bj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.18.209.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:4b:37:cd:f8:bc:ff:71:af:2f:c0:7a:d6:35:4f:63:8c:af:
41:49:e0:18:28:83:4a:9c:57:c5:dd:1c:80:7e:6c:6f:9e:9b:
06:d0:c7:60:cd:93:45:c0:59:9c:32:7f:e2:db:50:1b:59:4c:
78:d9:75:db:0c:38:3f:f4:cc:f7:ab:9d:fd:71:2f:47:68:79:
ce:cb:0c:27:7e:62:0e:96:f0:c1:b8:b4:1f:4e:f9:fd:35:81:
04:08:e7:34:61:db:cc:fd:0e:41:6e:70:6f:89:1d:4c:c1:d6:
2b:43:dc:dc:41:c4:78:b6:63:dc:56:d3:45:62:65:dc:b7:ed:
67:62:42:ec:c3:cf:34:95:b4:e4:93:1c:b6:41:b9:41:92:8b:
13:30:1d:75:72:d0:b3:8b:cd:a6:c2:d8:56:bd:bc:56:b0:e1:
60:5e:5b:2c:00:3b:74:ab:da:e7:44:25:74:b5:ac:2a:97:35:
fe:2b:3c:d7:78:95:80:ba:ca:cb:2a:d5:66:40:ec:e6:5f:9e:
7f:91:ba:4f:fd:13:a9:11:6d:cf:6a:1a:8c:37:cf:d5:56:33:
76:e9:2b:b9:b3:ec:08:f0:41:32:3f:b7:32:d6:6d:68:5d:76:
83:02:6e:97:d2:6f:a6:20:69:e7:0b:7f:5e:27:ea:2c:a7:b6:
19:23:76:ca
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZNu8B2BCdHer9qO8MvTGD1dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOTUwOWIzM2RhNTVmM2U1ZDUyODNlYjYyMWQwZDM1ZDdh
ZWVkNWMwHhcNMjQxMTI3MTg0NDA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTI0MjAxYzE1NDQxZWE1YWFjYTFhZDk2ZWNjYzA1MDU5YmQ2ZTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28qCNGPbo0wG+7azC/jj6aVMMOpS
Q8mTw6Jz8MLMPCGn7xjgKZeXD4+u1N2SJFhWfldrFUxeEmCPeXOeDqkdct9558HN
X3ajiL5tscwxQypsBledk4VL1Jwcy45VEqyZK5ug9ymuayD8CzGMUm7nOLFRrQ4O
wz39aw954FN7eWvh05Sp9BlLeU/eKgwya5EZNtFwZZ8t9JVWOxHO7cW0yHt1XV+v
HgUnEftS5W8lJ/9fDV0ZW1s/6AIfVWAmwdTsupA11y9k6gM6WbrlKPONj9S43bpi
afJgai74iLcNqyURrj6RHCI68XzLiSFeOaJHwIwlx491vTjTXVaQzPAv3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFkkIBwVRB6lqsoa2W7MwFBZvW4+MB8GA1UdIwQY
MBaAFE+VCbM9pV8+XVKD62IdDTXXru1cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDVVSnN6MmxYejVkVW9QclloME5OZGV1N1Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82ZmMxYmMtYTVmOC00MmE4LTk1ZTQt
NjAxMDdlMmI1MTA5LzEvV1NRZ0hCVkVIcVdxeWhyWmJzekFVRm05Ymo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82ZmMxYmMtYTVmOC00MmE4LTk1ZTQtNjAxMDdlMmI1MTA5
LzEvVDVVSnN6MmxYejVkVW9QclloME5OZGV1N1Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2RLRMA0G
CSqGSIb3DQEBCwUAA4IBAQC0SzfN+Lz/ca8vwHrWNU9jjK9BSeAYKINKnFfF3RyA
fmxvnpsG0MdgzZNFwFmcMn/i21AbWUx42XXbDDg/9Mz3q539cS9HaHnOywwnfmIO
lvDBuLQfTvn9NYEECOc0YdvM/Q5BbnBviR1MwdYrQ9zcQcR4tmPcVtNFYmXct+1n
YkLsw880lbTkkxy2QblBkosTMB11ctCzi82mwthWvbxWsOFgXlssADt0q9rnRCV0
tawqlzX+KzzXeJWAusrLKtVmQOzmX55/kbpP/ROpEW3PahqMN8/VVjN26Su5s+wI
8EEyP7cy1m1oXXaDAm6X0m+mIGnnC39eJ+osp7YZI3bK
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:56 2024 by rpki-client on console.sobornost.net